Privacy and the secondary use of data for health research: experience in Canada and suggested directions forward.

This paper has three parts. The first part describes developments in the use of personal information for health research in Canada, challenges in responding to new data protection legislation and the work of the Canadian Institutes of Health Research in assisting the research community to adapt to these developments. The second part critiques two aspects of the stakeholder analysis posited in William Lowrance's report: the lack of an analysis of researchers' interests as distinct from those of society at large, and the framing of privacy as an individual interest. I argue for recasting the privacy and research tension as a values conflict between two societal goods and not an individual versus a societal interest, and for explicitly acknowledging researchers' interests as data users. In so doing, there is no clear trump of privacy or research, and greater importance is placed upon the weighing of benefits and risks of individual studies to determine whether the waiving of consent for a particular study or programme of research is justified. The third part makes specific suggestions as to future ways in which data use practices may evolve. I argue the need to engage the public in deliberating the broad parameters under which personal information will be used, as the public collectively has a major stake in this issue and their input provides legitimacy for these uses of information. In addition, given the proliferation of prospectively-developed databases for research purposes, a 'systems' approach for obtaining consent for participation to replace the current study-by-study recruitment of individuals is appropriate.